[tor-bugs] #29668 [Core Tor/Tor]: Drop thread_fast_rng during postfork; improve thread_fast_rng fork-safety
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Mar 6 14:58:33 UTC 2019
#29668: Drop thread_fast_rng during postfork; improve thread_fast_rng fork-safety
------------------------------+--------------------------------
Reporter: nickm | Owner: nickm
Type: defect | Status: assigned
Priority: Medium | Milestone: Tor: 0.4.1.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: .1 | Reviewer:
Sponsor: |
------------------------------+--------------------------------
If you fork with a thread_fast_rng, we need to invalidate the
thread_fast_rng so it will get reconstructed in the child process.
We should also tweak thread_fast_rng so that it is always misuse-resistant
across fork()s in the same way. Right now it has 3 behaviors if you try to
share it across a fork:
* it works seamlessly if you have zero-on-fork support
* it crashes if you have drop-on-fork support
* it becomes an insecure prng if you have neither.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29668>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list